Privacy Policy

Last updated: 18 April 2026

Roundhouse Web ("we", "us", "our") is a sole-trader web design and maintenance business based in London, UK. We are committed to protecting the privacy of everyone who interacts with us. This policy explains what personal data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

Data controller

Ryan Anstey, trading as Roundhouse Web. You can contact us at roundhouseweblondon@gmail.com or by calling 07919 915450.

What we collect

We may collect and process the following personal data:

• Name and email address — when you email us, book a call, or submit the contact form on this website
• Phone number — if you choose to provide it in the contact form, during a call, or in correspondence
• Business name and website URL — to assess your website and prepare audits or proposals
• What you told us in the form — your project need, timeline, whether you want a free audit, and any message you wrote
• IP address and basic analytics data — collected automatically via Google Analytics 4 when you visit our website

Our contact form

When you submit the contact form on our homepage, the information you enter is sent directly from your browser to our servers over an encrypted (HTTPS) connection and stored in our CRM (Airtable) as a new enquiry. The form uses a simple timing check and a hidden field to filter out automated spam; it does not set tracking cookies. Your submission is reviewed by Ryan personally and you can expect a reply within one business day.

Why we collect it

We use your data for the following purposes, each with a lawful basis under UK GDPR:

• To respond to your enquiry — legitimate interest (you contacted us and expect a reply)
• To send a website audit or proposal — legitimate interest (delivering a service you requested)
• To send follow-up emails after initial contact — legitimate interest (business-to-business outreach under PECR soft opt-in provisions). You can opt out at any time by replying UNSUBSCRIBE
• To fulfil a contract — when you become a paying client, we process data necessary to deliver the agreed services
• To understand how visitors use our website — legitimate interest (improving our service). Analytics data is aggregated and cannot identify you personally

Cold outreach

We occasionally contact business owners whose publicly listed websites suggest they may benefit from our services. These emails are sent under the PECR business-to-business exemption and always include a clear way to opt out. If you receive an email from us and would prefer not to hear from us again, simply reply with UNSUBSCRIBE and we will remove you immediately.

How we store your data

Your data is stored in systems we control: our CRM (Airtable), our email (Google Workspace), and our workflow automation (n8n, self-hosted in the UK). Our website and contact form are hosted on Cloudflare Pages; when you submit the form, Cloudflare processes the request in transit before it reaches our CRM. We do not sell, rent or share your personal data with third parties for marketing purposes. Our sub-processors — Cloudflare (hosting and edge network), Google (email and analytics) and Airtable (CRM) — each have their own GDPR-compliant data processing agreements in place.

How long we keep it

Enquiry and prospect data is kept for up to 12 months from the date of last contact, then deleted. Client data is kept for the duration of the contract plus 6 years to meet UK tax record-keeping requirements.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted (where there is no overriding legal reason to keep it)
• Object to processing based on legitimate interest
• Withdraw consent at any time (where consent is the basis for processing)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email us at roundhouseweblondon@gmail.com.

Cookies

Our website uses Google Analytics 4, which sets cookies to distinguish unique visitors and track page views. These cookies do not contain personal information. You can block cookies through your browser settings at any time.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version.